CMD włącza się na pół sekundy po uruchomieniu.

[SnakeN]

CMD włącza się na pół sekundy po uruchomieniu. Mam c++, pythona na kompie wraz z grą albion online. Usunąłęm tlaunchera(nie wiedziełam co to za crap) i nie chce mieć po nim śladu na kompie. Proszę o szybką pomoc. Posiadam jeszcze sterowniki do HP drukarci i conexant'a. Malwarebytes nic nie wykrył. Z góry dzięki :). W załączniku pliki FRST:

Addition.txt FRST.txt

[SnakeN]

Posiadam jeszcze sterowniki do HP drukarci i conexant'a. Z góry dzięki :).

 

[Illidan]

Skopiuj zawartość podaną niżej i nigdzie nie wklejaj-FRST sam znajdzie "fixlist" w schowku systemowym.

 

Spoiler

Start::
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [HPUsageTrackingLEDM] => "C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe" "C:\Program Files (x86)\HP\HP UT LEDM\" [0 0000-00-00] () <==== UWAGA [zerobajtowy plik/folder]
HKU\S-1-5-21-2232479581-452203677-2682747563-1001\...\Run: [Medal] => "C:\Users\Artur\AppData\Local\Medal\update.exe" --processStart "Medal.exe" (Brak pliku)
CustomCLSID: HKU\S-1-5-21-2232479581-452203677-2682747563-1001_Classes\CLSID\{1108FD1C-492F-4251-B9DB-77F0274267B2}\InprocServer32 -> C:\Users\Artur\AppData\Local\Microsoft\EdgeUpdate\1.3.187.37\psuser_64.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-2232479581-452203677-2682747563-1001_Classes\CLSID\{4FFB4BD8-A109-4F25-A4DB-313678B19417}\InprocServer32 -> C:\Users\Artur\AppData\Local\Microsoft\EdgeUpdate\1.3.195.31\psuser_64.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-2232479581-452203677-2682747563-1001_Classes\CLSID\{5FC44EBC-3A1F-4FBB-85E5-34405788C8D7}\InprocServer32 -> C:\Users\Artur\AppData\Local\Microsoft\EdgeUpdate\1.3.187.41\psuser_64.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-2232479581-452203677-2682747563-1001_Classes\CLSID\{64C6EFB9-8F79-4106-B975-067448DC768F}\InprocServer32 -> C:\Users\Artur\AppData\Local\Microsoft\EdgeUpdate\1.3.177.11\psuser_64.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-2232479581-452203677-2682747563-1001_Classes\CLSID\{6DD6748E-7DAE-47EF-B4D5-03AA1B06D697}\InprocServer32 -> C:\Users\Artur\AppData\Local\Microsoft\EdgeUpdate\1.3.187.39\psuser_64.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-2232479581-452203677-2682747563-1001_Classes\CLSID\{72726D01-426C-4B35-8266-B4496CAA889E}\InprocServer32 -> C:\Users\Artur\AppData\Local\Microsoft\EdgeUpdate\1.3.183.29\psuser_64.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-2232479581-452203677-2682747563-1001_Classes\CLSID\{78C1ADF4-6DAE-4164-AEFA-4E3EAD9E750A}\InprocServer32 -> C:\Users\Artur\AppData\Local\Microsoft\EdgeUpdate\1.3.195.19\psuser_64.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-2232479581-452203677-2682747563-1001_Classes\CLSID\{83F21C4B-8643-4A08-A29A-822AFD835037}\InprocServer32 -> C:\Users\Artur\AppData\Local\Microsoft\EdgeUpdate\1.3.193.5\psuser_64.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-2232479581-452203677-2682747563-1001_Classes\CLSID\{A087E49F-1F8E-4603-A200-55537B737421}\InprocServer32 -> C:\Users\Artur\AppData\Local\Microsoft\EdgeUpdate\1.3.195.25\psuser_64.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-2232479581-452203677-2682747563-1001_Classes\CLSID\{AE1542A7-3989-481B-93A9-1500C5F56B14}\InprocServer32 -> C:\Users\Artur\AppData\Local\Microsoft\EdgeUpdate\1.3.185.27\psuser_64.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-2232479581-452203677-2682747563-1001_Classes\CLSID\{B258532D-3529-4BEB-BF38-F08F98B3968C}\InprocServer32 -> C:\Users\Artur\AppData\Local\Microsoft\EdgeUpdate\1.3.195.15\psuser_64.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-2232479581-452203677-2682747563-1001_Classes\CLSID\{BC4C72EF-3055-4A6D-86E1-AE4D24DB63CA}\InprocServer32 -> C:\Users\Artur\AppData\Local\Microsoft\EdgeUpdate\1.3.195.35\psuser_64.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-2232479581-452203677-2682747563-1001_Classes\CLSID\{CAE1760A-CB07-481B-8F9A-BC65510AF5D5}\InprocServer32 -> C:\Users\Artur\AppData\Local\Microsoft\EdgeUpdate\1.3.185.21\psuser_64.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-2232479581-452203677-2682747563-1001_Classes\CLSID\{DAA7499A-B3AC-4419-A89B-124318504051}\InprocServer32 -> C:\Users\Artur\AppData\Local\Microsoft\EdgeUpdate\1.3.185.29\psuser_64.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-2232479581-452203677-2682747563-1001_Classes\CLSID\{E3D57E77-FE71-4D06-BD34-D48820074909}\InprocServer32 -> C:\Users\Artur\AppData\Local\Microsoft\EdgeUpdate\1.3.181.5\psuser_64.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-2232479581-452203677-2682747563-1001_Classes\CLSID\{E76F97B1-1AE9-497C-9FA4-F57BBABAD54A}\InprocServer32 -> C:\Users\Artur\AppData\Local\Microsoft\EdgeUpdate\1.3.185.17\psuser_64.dll => Brak pliku
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> Brak pliku
FirewallRules: [UDP Query User{F937A197-F2CF-4912-B7F5-690DC4D6D405}C:\users\artur\appdata\local\medal\app-4.2445.0\medal.exe] => (Allow) C:\users\artur\appdata\local\medal\app-4.2445.0\medal.exe => Brak pliku
FirewallRules: [TCP Query User{D9005008-E906-4E83-BFB6-F3F52574916B}C:\users\artur\appdata\local\medal\app-4.2445.0\medal.exe] => (Allow) C:\users\artur\appdata\local\medal\app-4.2445.0\medal.exe => Brak pliku
FirewallRules: [{B35C0931-0032-48F1-85C1-9AE87FAC68D1}] => (Allow) c:\program files\notepad++\themes\images\materials\hex\ui\TxGaDcc.exe => Brak pliku
FirewallRules: [{CD08652B-D366-4CC1-8FBD-5C58A47A7705}] => (Allow) c:\program files\notepad++\themes\images\materials\hex\ui\bugreport.exe => Brak pliku
FirewallRules: [{3A52A024-A52C-4E6C-9608-A39E78EFE7F2}] => (Allow) c:\program files\notepad++\themes\images\materials\hex\ui\TInst.exe => Brak pliku
FirewallRules: [{E2A6FA1D-799B-41B8-83F7-52B24ADD6D4C}] => (Allow) c:\program files\notepad++\themes\images\materials\hex\ui\adb.exe => Brak pliku
FirewallRules: [{F7B0926E-6B30-4634-BFF0-A6812F107FC1}] => (Allow) c:\program files\notepad++\themes\images\materials\hex\ui\AndroidEmulatorEn.exe => Brak pliku
FirewallRules: [{AC17D09A-CA06-4F9D-8B52-1ED433BA2482}] => (Allow) c:\program files\notepad++\themes\images\materials\hex\ui\AndroidEmulatorEx.exe => Brak pliku
FirewallRules: [{D8BD73EF-08B9-473C-B0A2-FD0E1DC6F455}] => (Allow) c:\program files\notepad++\themes\images\materials\hex\ui\AndroidEmulator.exe => Brak pliku
FirewallRules: [{9DF02B34-645E-46CC-90F5-11C35D822F92}] => (Allow) C:\Program Files\Notepad++\themes\Images\Materials\Hex\AppMarket\DL\syzs_dl_svr.exe => Brak pliku
FirewallRules: [{067CFF12-C200-43B4-BD32-AAEFECB267EA}] => (Allow) C:\Program Files\Notepad++\themes\Images\Materials\Hex\AppMarket\DL\syzs_dl_svr.exe => Brak pliku
FirewallRules: [{36930AAF-184B-4DE1-9996-E980559162C3}] => (Allow) C:\Program Files\Notepad++\themes\Images\Materials\Hex\AppMarket\DL\syzs_dl_svr.exe => Brak pliku
FirewallRules: [{48BEC6C4-9D0F-44E3-9266-A47053BA4D7A}] => (Allow) C:\Program Files\Notepad++\themes\Images\Materials\Hex\AppMarket\DL\syzs_dl_svr.exe => Brak pliku
FirewallRules: [{57861F13-BB10-4F6B-82BB-4BB3AEC605CF}] => (Allow) C:\Program Files\Notepad++\themes\Images\Materials\Hex\AppMarket\DL\syzs_dl_svr.exe => Brak pliku
FirewallRules: [{12EE9DC4-908D-4F90-AB1F-B6208498714B}] => (Allow) C:\Program Files\Notepad++\themes\Images\Materials\Hex\AppMarket\DL\syzs_dl_svr.exe => Brak pliku
FirewallRules: [{2CDFD242-1954-4865-BC86-97CACBC41C25}] => (Allow) c:\program files\notepad++\themes\images\materials\hex\appmarket\GF186\TUpdate.exe => Brak pliku
FirewallRules: [{282CFB3B-23C4-4250-9288-883A438F2096}] => (Allow) c:\program files\notepad++\themes\images\materials\hex\appmarket\GameDownload.exe => Brak pliku
FirewallRules: [{D4624D76-70BA-419A-A4D4-0008C38F87E8}] => (Allow) c:\program files\notepad++\themes\images\materials\hex\appmarket\QQExternal.exe => Brak pliku
FirewallRules: [{3E9E0397-8BBF-4784-BA52-4158EC2A2772}] => (Allow) c:\program files\notepad++\themes\images\materials\hex\appmarket\bugreport.exe => Brak pliku
FirewallRules: [{58C855DE-7C2A-4439-95AE-E4534268452B}] => (Allow) c:\program files\notepad++\themes\images\materials\hex\appmarket\TInst.exe => Brak pliku
FirewallRules: [{5F0C7F2C-73E5-4CA3-835A-97C2856D355E}] => (Allow) c:\program files\notepad++\themes\images\materials\hex\appmarket\AppMarket.exe => Brak pliku
FirewallRules: [{B20DC803-6D14-4634-9255-286278C76F58}] => (Allow) C:\Program Files\TxGameAssistant\AppMarket\DL\syzs_dl_svr.exe => Brak pliku
FirewallRules: [{354D4225-2DFC-432B-8EC3-68FAE9E6ADC1}] => (Allow) C:\Program Files\TxGameAssistant\AppMarket\DL\syzs_dl_svr.exe => Brak pliku
FirewallRules: [{141FD773-6F48-40C9-896D-67336E00656E}] => (Allow) C:\Program Files\TxGameAssistant\AppMarket\DL\syzs_dl_svr.exe => Brak pliku
FirewallRules: [{09EF0D0A-DA99-4994-A98D-C2EE17C5B1D8}] => (Allow) C:\Program Files\TxGameAssistant\AppMarket\DL\syzs_dl_svr.exe => Brak pliku
FirewallRules: [{AE6784E5-48EF-43F7-9207-A885F3D280B1}] => (Allow) C:\Program Files\TxGameAssistant\AppMarket\DL\syzs_dl_svr.exe => Brak pliku
FirewallRules: [{7327F620-2270-40AE-933D-B8785C389A7F}] => (Allow) C:\Program Files\TxGameAssistant\AppMarket\DL\syzs_dl_svr.exe => Brak pliku
FirewallRules: [UDP Query User{EA3C7BEF-727E-4A51-8926-EAF8106C6324}C:\users\artur\appdata\roaming\.minecraft\runtime\java-runtime-alpha\windows\java-runtime-alpha\bin\javaw.exe] => (Allow) C:\users\artur\appdata\roaming\.minecraft\runtime\java-runtime-alpha\windows\java-runtime-alpha\bin\javaw.exe => Brak pliku
FirewallRules: [TCP Query User{13F00A72-CDE6-42E8-BBE8-9FEE8887D3CA}C:\users\artur\appdata\roaming\.minecraft\runtime\java-runtime-alpha\windows\java-runtime-alpha\bin\javaw.exe] => (Allow) C:\users\artur\appdata\roaming\.minecraft\runtime\java-runtime-alpha\windows\java-runtime-alpha\bin\javaw.exe => Brak pliku
FirewallRules: [UDP Query User{9635257D-E254-4D0F-B6C9-A1196FA79C90}C:\users\artur\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe] => (Allow) C:\users\artur\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe => Brak pliku
FirewallRules: [TCP Query User{3C78CD8B-57A2-485D-8886-356FED121DD9}C:\users\artur\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe] => (Allow) C:\users\artur\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe => Brak pliku
CreateRestorePoint:
EmptyTemp:
End::

 

Fixlist przeznaczona tylko dla autora tematu!

W FRST kliknij opcję "Napraw" (Fix). Pokaż raport  "fixlog.txt", który otrzymasz po restarcie komputera. Pobierz jeszcze "ADWCleaner" i przeskanuj nim system, usuń jeśli coś znajdzie i pokaz log z usuwania. Dodatkowo pobierz jeszcze "Malwaresbytes" i też przeskanuj nim system, pokaż raport z usuwania jeśli tez jeszcze coś znajdzie.